Pass Matrix Based Graphical Password Authentication on the Android Platform

Most Android users today do not secure authentication layers when using their smartphone apps. Also, after utilizing the apps, users frequently do not log off. The risk of unauthorized access to the apps is high when the mobile phone is stolen or accidentally missing. This method of authentication is to prevent unauthorized access to the apps on the android platform and also from other attacks. A graphical password, also known as graphical user authentication, is a type of authentication that uses graphics instead of letters, numbers, or special characters. This paper discusses the implementation of graphical password authentication in the android platform, as well as the design and implementation of a system that integrates encrypted one-time passwords, encryption methods for one-time passwords, and existing graphical passwords. This technique of authentication uses a graphical password authentication system that has a combination of encrypted one-time password and image authentication to lock and unlock applications/apps on the android platform. The integration with the encrypted one-time password will be randomly generated by the server where it is valid only for one login session and after that, the session will be terminated. The system encrypts all passwords and important data using the AES algorithm even in the system’s database. This alternative technique is used to enhance the current authentication system by not only preventing data from being stolen but also securing it from shoulder surfing and man-in-the-middle attacks.